Privacy Policy

1. Introduction and Data Controller

Welcome to Tenisime ("we", "our", or "us"). The controller of your personal data is Mateusz Wojtaś, the operator of the Tenisime application, available at tenisime.com.

This Privacy Policy explains what personal data we collect, the purposes and legal bases for processing it, and your rights under the General Data Protection Regulation (GDPR).

For questions about data processing, please contact us at: contact@tenisime.com.

2. Legal Bases for Processing

We process your personal data on the following legal bases (Article 6 GDPR):

Art. 6(1)(b) – Contract performance: providing Tenisime services, account management, player matching, match management, and Premium subscription handling.

Art. 6(1)(a) – Consent: sending push notifications, accessing your location for nearby games, sharing your profile with other users, the Meta pixel on tenisime.com (only if you agree, Section 11), and contacting you after you fill in the organizer form (Section 14).

Art. 6(1)(f) – Legitimate interests: ensuring app security, detecting misuse, monitoring technical errors, product analytics of the main paths in the app, and improving services; on tenisime.com also delivering the site and its fonts (Section 11).

You may withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

3. What Data We Collect

We collect the following categories of personal data:

Account and profile data:

• Name or username, email address
• Profile photo (optional)
• Skill level, city, playing preferences
• Authentication credentials (managed by Clerk Inc.)

Sports activity data:

• Match history, scores, and statistics
• Tournaments, leagues, and training sessions
• Player connections (friends)

Location data:

• Approximate location (city)
• Your configured notification radius (5–100 km)

Subscription data:

• Premium subscription status (active/inactive, period, validity) — see Section 6

Technical data:

• Device information (type, OS, identifiers)
• Error and crash logs (anonymized, processed by Sentry)
• Push token for notification delivery

Analytics data (PostHog):

• Events from the main paths in the app (e.g. opening the app, end of session, sign-in and sign-up, and selected actions), not a record of all your taps
• Events are linked to your account: account ID, e-mail address, first and last name

Communications:

• Messages exchanged with other users via in-app chat

4. How We Use Your Data

We use your personal data to:

• Provide and maintain Tenisime services
• Manage your account and authentication
• Match players based on skill level and location
• Display nearby games and match listings within your configured radius
• Send push notifications by category: messages, match invitations, friend requests, nearby games, tournaments, leagues, trainings, activity reminders
• Calculate rankings and statistics
• Support tournaments, leagues, and training sessions
• Operate the Premium subscription and provide paid features (e.g. AI Coach)
• Display courts on the map
• Enable communication between users
• Ensure platform security and detect misuse
• Monitor and fix technical errors
• Analyze which main paths users take, to improve the app (product analytics)

5. Data Sharing

Your data may be shared in the following circumstances:

Other app users:

Your public profile (name, skill level, city, statistics) is visible to other Tenisime users.

Data processors:

• Clerk Inc. (USA) – authentication and identity management (Apple, Google, email sign-in); data transferred under Standard Contractual Clauses (SCC).
• Supabase Inc. (USA) – database and backend infrastructure; data stored on EU servers or transferred under SCC.
• Expo (USA) – push infrastructure and OTA updates; device token shared for notification delivery.
• Google LLC / Firebase Cloud Messaging (USA) – push notification delivery on Android; data transferred under SCC.
• Mapbox Inc. (USA) – court map rendering and location geocoding; approximate coordinates shared for map display.
• RevenueCat, Inc. (USA) – Premium subscription status management; data transferred under SCC (see Section 6).
• Functional Software Inc. / Sentry (USA) – error and crash monitoring; logs contain anonymized technical data.
• PostHog Inc. (USA) – product analytics (events from the main paths in the app); we use servers in the EU region (eu.i.posthog.com).
• Resend, Inc. (USA) – sending e-mails, including the notification about a submission of the organizer form (Section 14); data transferred under Standard Contractual Clauses (SCCs).
• Cloudflare, Inc. (USA) – hosting and delivery of tenisime.com; processes IP addresses, technical request data and server logs; data transferred under SCCs.

Recipients of data from tenisime.com (only if you agree):

• Meta Platforms Ireland Ltd. / Meta Platforms, Inc. – Meta pixel; after you click "I agree" in the consent banner, your browser sends information about the pages you visit to Meta (Section 11).

Public authorities, when required by applicable law.

We do not sell your personal data to third parties.

6. Payment and Subscription Data

If you use a paid Premium subscription (e.g. AI Coach), payment is processed through the App Store (Apple) or Google Play (Google).

To manage your subscription status (active/inactive, period, validity) we use RevenueCat, Inc. (USA) as a data processor. It receives a pseudonymous user identifier and the purchase information provided by the store. Data is transferred under Standard Contractual Clauses (SCC).

The legal basis for processing this data is contract performance (Art. 6(1)(b) GDPR).

7. Data Security

We implement appropriate technical and organizational measures, including:

• Data encryption in transit (TLS/HTTPS)
• Access controls for internal systems
• Regular security reviews and audits
• Restricted access to personal data, limited to authorized personnel

No method of transmission over the Internet is 100% secure. In the event of a data breach posing a high risk to your rights, you will be informed in accordance with GDPR requirements.

8. Data Retention

We retain your personal data for the following periods:

• Account and profile data: for the duration of your account; permanently deleted within 30 days of account deletion.
• Match history and statistics: for the duration of your account; deleted upon account deletion.
• Error and crash logs (Sentry): 90 days from the event.
• Database backups: up to 30 days after account deletion, then permanently deleted.
• Chat messages: for the duration of the account; deleted upon account deletion.
• Push tokens: deleted immediately upon logout or account deletion.
• Contact-form enquiries from organizers and clubs: until the matter is closed, then deleted (Section 14).

After the specified periods, data is permanently deleted or anonymized.

9. Your Rights (GDPR)

Under the GDPR, you have the following rights:

• Right of access (Art. 15): obtain information about the data processed and a copy of that data.
• Right to rectification (Art. 16): request correction of inaccurate or incomplete data.
• Right to erasure (Art. 17): request deletion of your data ("right to be forgotten").
• Right to restriction of processing (Art. 18) in certain circumstances.
• Right to data portability (Art. 20): receive your data in a structured, commonly used, machine-readable format.
• Right to object (Art. 21) to processing based on legitimate interests.
• Right to withdraw consent (Art. 7(3)) at any time.

To exercise these rights, contact us at: contact@tenisime.com. We will respond within 30 days.

10. Supervisory Authority

You have the right to lodge a complaint with the data protection supervisory authority in your country of residence.

If you are located in Poland, the competent authority is:

Urząd Ochrony Danych Osobowych (UODO)
ul. Stawki 2, 00-193 Warsaw, Poland
Phone: +48 606-950-000
Email: kancelaria@uodo.gov.pl
Website: uodo.gov.pl

You may file a complaint if you believe that the processing of your personal data violates the GDPR or applicable national data protection law.

11. Local Data Storage

The Tenisime mobile app does not use cookies in the traditional sense. Instead, we use local data storage on your device for:

• Storing your authentication session token (managed by Clerk)
• Saving notification preferences and app settings
• Storing the push token for notification delivery
• Locally caching data to improve app performance

You can remove this data by uninstalling the app or clearing its cache in your device settings.

The tenisime.com website:

• We store your choice in the consent banner in your browser (localStorage, key tenisime_consent). This is necessary to remember your decision.
• PostHog statistics. The site sends usage events to PostHog (EU servers), e.g. visiting a page or clicking a store button. Before your consent this happens without cookies, without storing anything in your browser, without a person profile and without session recording. After you click "I agree", PostHog stores a visitor identifier (localStorage and a cookie) to link visits across pages and the store link with the app. We do not send names, emails or form contents.
• The Meta pixel runs only after you click "I agree". Your browser then connects to Meta servers, which may set cookies (e.g. _fbp) and receive the pages you visit, your IP address and device data. We use it to learn which content leads players to the app. If you choose "Necessary only", the pixel is not loaded.
• Google Fonts are loaded from Google servers (fonts.googleapis.com, fonts.gstatic.com), so your IP address is sent to Google when the page is displayed. Basis: legitimate interest (displaying the page as designed).
• The organizer panel (tenisime.pl/panel) uses Clerk, which stores session cookies in your browser that are necessary to sign in. The tenisime.com/panel address redirects to this panel.
• We remember the panel language you choose in a panel_lang cookie (valid for one year, sent only to the /panel address). It contains no personal data.

You can withdraw your consent to the Meta pixel at any time, as easily as you gave it: use the "Privacy settings" button in the site footer (it reopens the same consent banner) or write to contact@tenisime.com. Withdrawal does not affect the lawfulness of processing before it.

PostHog analytics in the app is based on legitimate interests (Art. 6(1)(f) GDPR). You have the right to object to such processing (Art. 21): write to contact@tenisime.com.

12. Children's Data

Tenisime services are intended for users who are at least 16 years old, in line with the Polish implementation of Article 8 GDPR for information society services.

We do not knowingly collect personal data from individuals under 16. If we learn that a child under 16 has provided us with personal data without verifiable parental or guardian consent, we will delete it promptly.

If you are a parent or guardian and believe your child has provided us with personal data, please contact us at: contact@tenisime.com.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Displaying a notification in the app
• Sending an email to the address on file
• Updating the "Last updated" date at the top of this document

Your continued use of the app after changes take effect constitutes acceptance of the updated Privacy Policy.

14. Contact Form for Organizers and Clubs

The page tenisime.com/for-organizers has a contact form for partnership enquiries, the partner programme and larger leagues. If you fill it in, we process the data you provide: your name, e-mail address, phone number and city (the last two are optional) and the text of your message. We also record which form the submission came from (the short contact bar or the full form).

Purpose: contacting you about the partner programme or a larger league and replying to your enquiry. The form does not create a club or an account — a club is submitted in the app.

Legal basis: your consent (Art. 6(1)(a) GDPR), given by ticking the box in the form. You can withdraw it at any time by writing to contact@tenisime.com.

Retention: until the matter is closed, after which the form data is deleted. The data is stored in the app's database with the processor described in Section 5.

E-mail notification: we notify the administrator of every submission by an e-mail sent through Resend (Section 5). It contains the form data, so a copy of the submission is also in the administrator's mailbox; we delete it once the matter is closed.

15. Contact

For questions, comments, or requests regarding this Privacy Policy or the processing of your personal data, contact the controller, Mateusz Wojtaś:

Email: contact@tenisime.com
Website: tenisime.com

We will endeavor to respond to your inquiry within 30 days of receipt.